Privacy Policy.

Information We Collect

• Username and password (stored as a secure hash — never in plain text)
• Subscription status, tier (Basic / Standard / Premium), and expiry date

• We record the total volume of data (in MB/GB) transferred through the VPN tunnel per billing period. This is used solely to enforce your subscription's data allowance. We do not inspect the content of that traffic.

• Connection and disconnection timestamps (used for billing and abuse prevention)
• The VPN server you connected to

• Operating system version and app version, collected only when you contact support

Information We Do NOT Collect

• Browsing history, websites visited, or URLs accessed
• DNS queries
• Content of your internet traffic (messages, files, data packets)
• Your originating IP address after a VPN session ends
• Any form of deep-packet inspection data

How We Use Your Information

• To authenticate you and manage your subscription
• To enforce data allowance limits tied to your subscription tier
• To send in-app notifications about your account (e.g., low bandwidth, renewal reminders)
• To respond to support requests
• To detect and prevent fraudulent or abusive use of the Service

We do not use your information for advertising or sell it to any third party.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose information only in the following limited circumstances:

• Service providers: Hosting and infrastructure providers who process data on our behalf under strict confidentiality obligations.
• Legal requirements: If required by law, court order, or governmental authority — and only to the extent required. Because we do not log traffic, we have no browsing data to provide even if compelled.

Data Retention

• Account credentials and subscription records are retained while your account is active.
• Aggregated bandwidth usage totals are reset each billing period.
• Session timestamps (connection/disconnection logs) are retained for a maximum of 30 days, then automatically deleted.
• Upon account deletion, all personal data is removed within 30 days.

Security

All data in transit between the app and our servers is encrypted using TLS. VPN traffic is encrypted using the VLESS protocol with TLS. Passwords are stored as cryptographic hashes and are never accessible in plain text by our staff.

We regularly review our security practices, but no system is completely immune to risk. If you suspect unauthorized access to your account, contact us immediately.

Children's Privacy

124VPN is not directed at children under the age of 17. We do not knowingly collect personal information from anyone under 17. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Your Rights

You may at any time:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

Third-Party Services

124VPN uses the following third-party infrastructure to deliver the Service:

• Cloud hosting providers — for server infrastructure. These providers are contractually prohibited from accessing or retaining your VPN traffic data.

We do not integrate any third-party analytics SDKs, advertising SDKs, or social login providers into the app.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us: